Add printf format-string vulnerability info